www.destinationxl.com

- DESTINATION XL GROUP -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0d:2a:9c:58:4a:90:70:ef:ef:7b:87:1b:69:94:1c:82 was issued on by DigiCert Inc.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DESTINATION XL GROUP

Organization: DESTINATION XL GROUP
State / Province: Massachusetts
Locality: Canton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:2a:9c:58:4a:90:70:ef:ef:7b:87:1b:69:94:1c:82
Serial Number (int): 17501211464315349399874108285183597698
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 80:88:e3:d3:74:54:70:75:ae:ff:da:2b:95:18:9a:57:a8:f4:39:2c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): a7:38:30:43:59:f8:97:b8:f8:fe:bc:3a:c3:fa:09:52:60:99:92:d7
Fingerprint (sha256): 22:2a:d3:6d:ca:72:0a:2d:7f:29:db:2b:04:e9:06:50:ae:c7:24:c9:79:d4:63:48:a5:81:13:91:27:4b:4c:f4

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.destinationxl.com

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.destinationxl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.destinationxl.com
destinationxl.com
rochester-big-and-tall.destinationxl.com
www.casualmale.com
beta.instore.destinationxl.com
uat.beta.instore.destinationxl.com
prodl.living-xl.destinationxl.com
bigandtall.com
www.m.destinationxl.com
uat.beta.destinationxl.com
prodl.big-and-tall-direct.destinationxl.com
failover.casualmale.com
instore.beta.destinationxl.com
prodl.casual-male-big-and-tall.destinationxl.com
www.btdirect.com
m.beta.destinationxl.com
dxl.com
t.destinationxl.com
livingxl.com
beta.rochester-big-and-tall.destinationxl.com
www.bigandtall.com
rochesterclothing.com
casualmale.com
prodl.rochester-big-and-tall.destinationxl.com
shoes-xl.destinationxl.com
beta.casual-male-big-and-tall.destinationxl.com
casual-male-big-and-tall.destinationxl.com
living-xl.destinationxl.com
test-beta.destinationxl.com
big-and-tall-direct.destinationxl.com
prodl.shoes-xl.destinationxl.com
www.dxl.com
uat.beta.rochester-big-and-tall.destinationxl.com
m.destinationxl.com
testl.destinationxl.com
dev-beta.destinationxl.com
beta.big-and-tall-direct.destinationxl.com
instore.destinationxl.com
www.livingxl.com
beta.destinationxl.com
www.casualmale.ca
beta-test.destinationxl.com
beta.m.destinationxl.com
prodl.destinationxl.com
btdirect.com
www.casualmalexl.ca
prodl.m.destinationxl.com
www.shoesxl.com
www.m.beta.destinationxl.com
www.rochesterclothing.com
beta.living-xl.destinationxl.com
image.bigandtall.com
shoesxl.com
images.destinationxl.com
beta.shoes-xl.destinationxl.com

Other certificates including the domain name destinationxl.com

(limited to 100 certificates)
preview-testl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
preview-testl.destinationxl.com
vlgstb.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
instore.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
uat.crm.destinationxl.com
careers.destinationxl.com
destinationxl.com
mail.cmal.com
preview.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
gifts.destinationxl.com
qa-gifts.dxl.com
instore.destinationxl.com
www.destinationxl.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
destinationxl.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
landing.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
leapfrog-ssl-15.gcs-web.com
*.destinationxl.com
www.destinationxl.com
landing.destinationxl.com
prodl.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
landing.destinationxl.com
UAT.BETA.DESTINATIONXL.COM
landing.destinationxl.com
www.destinationxl.com
instore.mtm.uat.gamma.destinationxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
leapfrog-ssl-15.gcs-web.com
www.destinationxl.com
www.destinationxl.com
devl.beta.destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com
careers.destinationxl.com
careers.destinationxl.com
landing.destinationxl.com
landing.destinationxl.com
vlgstb.destinationxl.com
help.dxl.com
leapfrog-ssl-15.gcs-web.com
careers.destinationxl.com
mail.cmal.com
www.destinationxl.com
destinationxl.com
leapfrog-ssl-15.gcs-web.com
landing.destinationxl.com

Certificate

The complete raw certificate details for www.destinationxl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL+jCCCuKgAwIBAgIQDSqcWEqQcO/ve4cbaZQcgjANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTAzMjYwMDAwMDBaFw0yMDA0MTIxMjAwMDBaMHUxCzAJBgNVBAYTAlVTMRYw
FAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQHEwZDYW50b24xHTAbBgNVBAoT
FERFU1RJTkFUSU9OIFhMIEdST1VQMR4wHAYDVQQDExV3d3cuZGVzdGluYXRpb254
bC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWPko1XLGvbMn7
0ZDN3jBsf854w63aKRO11iaFisg05pm0K/bO3i+giaPMijQvuMZjYUf+82XR4a7O
1081SNJCNiu7/MOjxmgQoFnFDZ3Dlm63mir0C6lUuXgzxwRyi0SOmlPWDYqWHiA0
WzZgjy9mPvIu2D7TZR92bSFH7AT/E8YmT79SXzrpdozMNMsLXdhk9fYCAvU3zeld
i6wNEiSilKEMYv5hp5UA5Zh4/3p92BgYFCZPqINCFiUwKe+116BMUIYYrF7GkyDg
O7eRe3B2ThysM5QziyfUhWiRy1rFwlTeHrNdWjhXt/j34v6P+RC0u1SsV5YjOO+m
Q7hIBTAnAgMBAAGjggibMIIIlzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MW
OJ5sxTAdBgNVHQ4EFgQUgIjj03RUcHWu/9orlRiaV6j0OSwwggYNBgNVHREEggYE
MIIGAIIVd3d3LmRlc3RpbmF0aW9ueGwuY29tghFkZXN0aW5hdGlvbnhsLmNvbYIo
cm9jaGVzdGVyLWJpZy1hbmQtdGFsbC5kZXN0aW5hdGlvbnhsLmNvbYISd3d3LmNh
c3VhbG1hbGUuY29tgh5iZXRhLmluc3RvcmUuZGVzdGluYXRpb254bC5jb22CInVh
dC5iZXRhLmluc3RvcmUuZGVzdGluYXRpb254bC5jb22CIXByb2RsLmxpdmluZy14
bC5kZXN0aW5hdGlvbnhsLmNvbYIOYmlnYW5kdGFsbC5jb22CF3d3dy5tLmRlc3Rp
bmF0aW9ueGwuY29tghp1YXQuYmV0YS5kZXN0aW5hdGlvbnhsLmNvbYIrcHJvZGwu
YmlnLWFuZC10YWxsLWRpcmVjdC5kZXN0aW5hdGlvbnhsLmNvbYIXZmFpbG92ZXIu
Y2FzdWFsbWFsZS5jb22CHmluc3RvcmUuYmV0YS5kZXN0aW5hdGlvbnhsLmNvbYIw
cHJvZGwuY2FzdWFsLW1hbGUtYmlnLWFuZC10YWxsLmRlc3RpbmF0aW9ueGwuY29t
ghB3d3cuYnRkaXJlY3QuY29tghhtLmJldGEuZGVzdGluYXRpb254bC5jb22CB2R4
bC5jb22CE3QuZGVzdGluYXRpb254bC5jb22CDGxpdmluZ3hsLmNvbYItYmV0YS5y
b2NoZXN0ZXItYmlnLWFuZC10YWxsLmRlc3RpbmF0aW9ueGwuY29tghJ3d3cuYmln
YW5kdGFsbC5jb22CFXJvY2hlc3RlcmNsb3RoaW5nLmNvbYIOY2FzdWFsbWFsZS5j
b22CLnByb2RsLnJvY2hlc3Rlci1iaWctYW5kLXRhbGwuZGVzdGluYXRpb254bC5j
b22CGnNob2VzLXhsLmRlc3RpbmF0aW9ueGwuY29tgi9iZXRhLmNhc3VhbC1tYWxl
LWJpZy1hbmQtdGFsbC5kZXN0aW5hdGlvbnhsLmNvbYIqY2FzdWFsLW1hbGUtYmln
LWFuZC10YWxsLmRlc3RpbmF0aW9ueGwuY29tghtsaXZpbmcteGwuZGVzdGluYXRp
b254bC5jb22CG3Rlc3QtYmV0YS5kZXN0aW5hdGlvbnhsLmNvbYIlYmlnLWFuZC10
YWxsLWRpcmVjdC5kZXN0aW5hdGlvbnhsLmNvbYIgcHJvZGwuc2hvZXMteGwuZGVz
dGluYXRpb254bC5jb22CC3d3dy5keGwuY29tgjF1YXQuYmV0YS5yb2NoZXN0ZXIt
YmlnLWFuZC10YWxsLmRlc3RpbmF0aW9ueGwuY29tghNtLmRlc3RpbmF0aW9ueGwu
Y29tghd0ZXN0bC5kZXN0aW5hdGlvbnhsLmNvbYIaZGV2LWJldGEuZGVzdGluYXRp
b254bC5jb22CKmJldGEuYmlnLWFuZC10YWxsLWRpcmVjdC5kZXN0aW5hdGlvbnhs
LmNvbYIZaW5zdG9yZS5kZXN0aW5hdGlvbnhsLmNvbYIQd3d3LmxpdmluZ3hsLmNv
bYIWYmV0YS5kZXN0aW5hdGlvbnhsLmNvbYIRd3d3LmNhc3VhbG1hbGUuY2GCG2Jl
dGEtdGVzdC5kZXN0aW5hdGlvbnhsLmNvbYIYYmV0YS5tLmRlc3RpbmF0aW9ueGwu
Y29tghdwcm9kbC5kZXN0aW5hdGlvbnhsLmNvbYIMYnRkaXJlY3QuY29tghN3d3cu
Y2FzdWFsbWFsZXhsLmNhghlwcm9kbC5tLmRlc3RpbmF0aW9ueGwuY29tgg93d3cu
c2hvZXN4bC5jb22CHHd3dy5tLmJldGEuZGVzdGluYXRpb254bC5jb22CGXd3dy5y
b2NoZXN0ZXJjbG90aGluZy5jb22CIGJldGEubGl2aW5nLXhsLmRlc3RpbmF0aW9u
eGwuY29tghRpbWFnZS5iaWdhbmR0YWxsLmNvbYILc2hvZXN4bC5jb22CGGltYWdl
cy5kZXN0aW5hdGlvbnhsLmNvbYIfYmV0YS5zaG9lcy14bC5kZXN0aW5hdGlvbnhs
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dl
b1RydXN0UlNBQ0EyMDE4LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgG
CCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAEC
AjB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMuZ2Vv
dHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5nZW90cnVzdC5j
b20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA
AWm6nofVAAAEAwBGMEQCIEhPIHceDV8B9wmxa3rzpV3oDf4qdM05O76pesRrJCOU
AiA8D6Im1n9E4QLq8t8CS+WkBEEBRibiUC0Kmh7APrYdYAB2AId1v+dZfPiMQ5lf
vfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABabqeiPUAAAQDAEcwRQIgJFVgsCwlPFhU
6iQcLlcydT44Z2X2W4YpyjtHLKWo6EcCIQCNoDoTwSAPl/KuLXF5dnCLVtVDrEZr
2DVzorytVq1NODANBgkqhkiG9w0BAQsFAAOCAQEAefPbzLmejcvZh7mvxJAN+LEq
HWe7NUSCZfp6/e6aMKN1Ik74KBlQIEVcpLJkrv3CYp8GeTJDBqSzJ8+iFK+YiZM2
URhvEnGNO8IhuQYhUsHiF+iCNTMe6ZDlqfXIA43w6Qh3naPBVawGZzXTlfsZE539
55eDwD5eSKNjV6wiHIg7e3YPaxVKWyU7O0ExA1aQl8nFuw7exzHKcwxnMiF+k2/8
6q6T5EZWaPmXcmRkhXg5ys1oZgQthThe0vV50lGmFXOlr5sf2DYCHtPgYzXi/yt8
cFIaluEI4z4UDx4CZ9sQ8YgAZZ1arnHYb/kFmW63SuuXymiAPO1GA0KWOTo9Sg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1j5KNVyxr2zJ+9GQzd4w
bH/OeMOt2ikTtdYmhYrINOaZtCv2zt4voImjzIo0L7jGY2FH/vNl0eGuztdPNUjS
QjYru/zDo8ZoEKBZxQ2dw5Zut5oq9AupVLl4M8cEcotEjppT1g2Klh4gNFs2YI8v
Zj7yLtg+02Ufdm0hR+wE/xPGJk+/Ul866XaMzDTLC13YZPX2AgL1N83pXYusDRIk
opShDGL+YaeVAOWYeP96fdgYGBQmT6iDQhYlMCnvtdegTFCGGKxexpMg4Du3kXtw
dk4crDOUM4sn1IVokctaxcJU3h6zXVo4V7f49+L+j/kQtLtUrFeWIzjvpkO4SAUw
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17501211464315349399874108285183597698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DESTINATION XL GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.destinationxl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27045713545768988955009848982353496362317994426714031658115287327472143289300636878850141261536737259996724719388858706624333035231944518912769790497095858015719544231555198460476656709196166464789256199664057780980719720354880226894558082773469266161001838129020227872323125513040943174130810270640768925543229850967241876451433280080490195632090644225953889172101654850935988352104771660892475882778122696817938685256121742215489267197781563338638546129285233727994635592331874663904910370452864338063887179761960580673615256938914473634840477706358810742650648424455451324377602537692458351984140555929379332763687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8088e3d374547075aeffda2b95189a57a8f4392c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1540 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'failover.casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casualmale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casual-male-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.beta.rochester-big-and-tall.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.big-and-tall-direct.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instore.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmale.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-test.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'btdirect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.casualmalexl.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodl.m.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.beta.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rochesterclothing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.living-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image.bigandtall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoesxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.destinationxl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.shoes-xl.destinationxl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169ba9e87d500000403004630440220484f20771e0d5f01f709b16b7af3a55de80dfe2a74cd393bbea97ac46b24239402203c0fa226d67f44e102eaf2df024be5a40441014626e2502d0a9a1ec03eb61d600076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169ba9e88f500000403004730450220245560b02c253c5854ea241c2e5732753e386765f65b8629ca3b472ca5a8e8470221008da03a13c1200f97f2ae2d717976708b56d543ac466bd83573a2bcad56ad4d38
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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